In the Claims: 
Please amend the claims as follows: 

1 . (currently amended) A method to detect a fault in a CPU of an industrial controller 
during on-line safety control of real world objects the method comprising: comprising th e st e ps 
ef 

compiling an application program into assembler instructions, which application program 
was previously defined in a high level language intended for safety control, 
charact e rized by that the m e thod comprising tho stops of 

compiling a test application into assembler instructions where the assembler instructions 
is a subset of the total number of assembler instructions available for the CPU, which test 
application was previously defined in said high level language intended for safety control and the 
test application covers at least all language constructs used in the application program, 

downloading the application program and the test application to a central unit of an 
industrial controller, 

executing repeatedly the test application in the industrial controller, 

comparing repeatedly by means of a test module a result from the test application with 
the pre-defined result in the test module, 

detecting a fault in the CPU as the result from the test application does not equal the pre- 
defined result stored in the test module and the unexpected result of the test application is due to 
the execution of an assembler instruction of the test application, 

aborting the execution of the application program wherein the application program is 



3 



prohibited from executing the assembler instruction which otherwise would cause the application 
program to fail. 

2. (currently amended) A The method according to claim 1 wh e r e 1 , wherein the 
assembler version of the test application comprise assembler code derived from all language 
constructs in the high-level language available for safety control of real world objects. 

3. (currently amended) A The method according to claim 1 , wherein 1 or claim 2 where 
the high level language intended for safety control is based on IEC 61131-3. 

4. (currently amended) A The method according to claim 3, charact e riz e d in that th e 
step-ef wherein defining a test application comprise an analys e s of analyzing the application in 
order to determine subset and software libraries used in the said application code. 

5. (currently amended) A The method according to claim 4, charact e riz e d in that th e 
s t e p of defining wherein a test application is mad e defined automatically without any additional 
command from an application programmer. 

6. (currently amended) A The method according to claim 5, charact e riz e d in that th e 
step-ef wherein executing the test application repeatedly is performed by a cyclic execution of 
the test application where the cycle time is determined from a given process safety time value. 

7. (currently amended) A The method according to claim 6, charact e rized in that 
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wherein the said test application before an execution receives a set of input values and the input 
values are generated by means of the test module. 

8. (currently amended) A The method according to claim 7, charact e riz e d in that the 
down loading st e p of wherein down-loading the application program and test application 
additionally comprise th e additional step of down-loading a predefined result. 

10. (currently amended) A computer program product, for use in an industrial control 
system, containing software code means loadable into the central unit of an industrial controller 
intended for safety control of real world objects, said computer program product characteriz e d in 
that it compris e s comprising means to make the industrial controller: 

execute repeatedly the test application in the industrial controller, 

compare repeatedly by means of a test module a result from the test application with the 
pre-defined result in the test module, 

detect a fault in the CPU as the result from the test application does not equal the pre- 
defined result stored in the test module and the unexpected result of the test application is due to 
the execution of an assembler instruction of the test application, 

abort the execution of the application program wherein the application program is 
prohibited from executing the assembler instruction which otherwise would cause the application 
program to fail , all steps according to th e m e thod in claim 1 . 

1 1 . (currently amended) An industrial control system, comprising an industrial 
controller with a central unit equipped with a CPU intended for safety control of real world 
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objects, an I/O system characteriz e d in that wherein the CPU is subject to fault detection 
according to the method in claim 1 . 
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